$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e08262c9-f5df-328d-9b79-83b5f044e0d8.roa File: e08262c9-f5df-328d-9b79-83b5f044e0d8.roa (raw, json) Hash identifier: wL32wKH6KaT30mD57tNretojbKSjrK0yBwT2V5lzO40= Subject key identifier: 73:45:72:7E:9E:15:D6:10:F0:60:D1:92:A1:97:25:60:37:44:BC:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D85FAF0E5FEFB37CCF0E64A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e08262c9-f5df-328d-9b79-83b5f044e0d8.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 36183 IP address blocks: 172.224.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:af:0e:5f:ef:b3:7c:cf:0e:64:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=a0658e37-ab2f-4481-bf18-2d9600b13b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:82:43:c3:68:89:0d:80:6c:dd:f5:a9:b5:b3: 3d:56:4a:db:4f:ac:84:cf:8d:b2:a7:5d:fc:a6:14: 26:b4:b6:6a:15:34:02:53:4f:a3:d2:94:47:3a:c8: 69:8e:dd:b2:a2:68:71:a9:c9:6c:71:02:9e:f0:95: 17:89:82:73:20:a4:11:1c:51:0a:53:31:05:f5:73: 79:ac:2c:1f:1a:7e:0b:ad:2c:85:80:bc:68:ba:23: a7:52:10:17:2d:84:0e:82:24:3e:7a:a0:54:c4:6d: f0:1d:d8:ec:4d:3b:91:6b:ec:d6:bc:73:a5:90:2f: 28:62:59:ff:fd:55:75:7e:9e:13:31:92:d2:53:56: ab:36:15:75:98:33:33:04:ec:24:f1:da:cd:f5:a6: 8f:80:3b:80:a8:45:bc:94:11:f8:32:42:11:56:f7: 11:4f:f2:06:ed:e4:04:e6:da:98:33:99:33:16:b0: 0e:fd:5d:a8:af:f0:46:14:07:e5:70:79:e5:cb:b4: cf:54:13:90:1b:ed:dc:cf:ba:cc:77:1a:5b:07:4a: cd:0c:e4:5e:4c:c6:27:99:28:4f:36:9c:1c:08:8a: f2:98:21:26:d6:3f:93:cc:00:24:a6:73:e7:12:56: e0:19:16:c4:a2:ea:ed:57:42:24:0d:c3:5a:6d:24: 49:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:45:72:7E:9E:15:D6:10:F0:60:D1:92:A1:97:25:60:37:44:BC:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e08262c9-f5df-328d-9b79-83b5f044e0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:da:1d:91:42:b2:b4:95:a3:d2:d1:f0:c1:6f:25:cd:d1:3d: 96:07:d2:89:e1:62:81:72:d3:27:1c:dc:c9:d7:40:a9:38:6c: aa:3d:80:61:31:dd:b0:90:c3:de:2c:83:86:a9:ab:4a:ac:96: ce:fd:15:74:5b:2d:39:fc:28:c6:aa:c3:38:a8:1b:65:77:56: 65:63:9a:e9:c6:6f:7f:49:b6:86:b1:2f:3f:d2:92:ac:78:89: a6:6d:af:03:d6:9f:81:db:50:92:4f:4f:49:0a:16:db:24:42: bd:e9:e6:8b:ef:e5:89:64:cc:71:3e:b7:05:46:85:66:3a:89: 17:c3:da:88:8e:5e:22:e8:d8:30:a8:5b:81:6f:a7:63:aa:97: 66:13:af:fc:48:80:ec:1a:4d:9c:d1:00:62:9c:e1:7a:de:d3: e1:28:45:34:01:68:b7:90:fc:fb:80:fb:3d:e8:3a:46:20:2f: 7c:50:d6:e9:36:39:4d:a0:2b:f6:90:16:57:94:33:eb:7d:59: f7:f1:22:41:83:26:42:95:bf:99:e2:e0:fd:06:48:4d:03:94: 28:4e:16:4e:5f:58:ed:ec:f0:d0:c7:f4:4d:69:93:cf:4c:19: 11:c2:48:bb:cd:51:fa:c1:f3:f4:34:0e:10:6a:1f:e0:e6:77: 02:d9:d7:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX68OX++zfM8OZKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YTA2NThlMzctYWIyZi00NDgxLWJmMTgtMmQ5NjAwYjEzYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloJDw2iJDYBs3fWptbM9VkrbT6yEz42yp138 phQmtLZqFTQCU0+j0pRHOshpjt2yomhxqclscQKe8JUXiYJzIKQRHFEKUzEF9XN5 rCwfGn4LrSyFgLxouiOnUhAXLYQOgiQ+eqBUxG3wHdjsTTuRa+zWvHOlkC8oYln/ /VV1fp4TMZLSU1arNhV1mDMzBOwk8drN9aaPgDuAqEW8lBH4MkIRVvcRT/IG7eQE 5tqYM5kzFrAO/V2or/BGFAflcHnly7TPVBOQG+3cz7rMdxpbB0rNDOReTMYnmShP NpwcCIrymCEm1j+TzAAkpnPnElbgGRbEourtV0IkDcNabSRJNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNFcn6eFdYQ8GDRkqGXJWA3RLzJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTA4MjYyYzktZjVkZi0z MjhkLTliNzktODNiNWYwNDRlMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDaHZFCsrSVo9LR8MFvJc3RPZYH0onhYoFy0ycc3MnXQKk4bKo9gGEx 3bCQw94sg4apq0qsls79FXRbLTn8KMaqwzioG2V3VmVjmunGb39JtoaxLz/Skqx4 iaZtrwPWn4HbUJJPT0kKFtskQr3p5ovv5YlkzHE+twVGhWY6iRfD2oiOXiLo2DCo W4Fvp2Oql2YTr/xIgOwaTZzRAGKc4Xre0+EoRTQBaLeQ/PuA+z3oOkYgL3xQ1uk2 OU2gK/aQFleUM+t9WffxIkGDJkKVv5ni4P0GSE0DlChOFk5fWO3s8NDH9E1pk89M GRHCSLvNUfrB8/Q0DhBqH+DmdwLZ16c= -----END CERTIFICATE-----Generated at Sat Jun 7 22:52:33 2025 by rpki-client